IBM Vault (formerly HashiCorp Vault) Reviews & Product Details

Simple installation in a single binary. Adapt tokenization concept in whole process of the product. Support IaC approach to deploy the whole product and service. Robust plugin architecture enables integration with other solutions too. In-built integration of most famous clouds makes Vault a perfect match to manage cloud as well as on-premises. On the other hand, Vault works on a standard set of APIs which can be manipulated easily without any dependency. This makes the product highly customizable and puts change management on an automated workflow. HashiCorp does a nice job by making the Vault OSS version and free of charge learning materials with ongoing community developments. Review collected by and hosted on G2.com.

Inconsistency of command and its parameters make us confused. They should have a standard on this. The documentation is there but not up to date. Most of the configuration examples are missing. It is not clear how we integrate the Vault in day-to-day work for immature users. HashiCorp should think about this and improve the lack of up-to-date documentation. Review collected by and hosted on G2.com.

Hashicorp Vault is pretty easy to use, have a large community online for help and support, and the integration with Consul is flawless. Review collected by and hosted on G2.com.

The premium features require the premium plan of course, but the pricing is very high for the value IMO. Review collected by and hosted on G2.com.

The set of the toolbox that the vault provides allows you to implement multiple requirements of security that a cloud-native architecture requires. Review collected by and hosted on G2.com.

An audit trail is not intuitive and could be better implemented and user-friendly since this is a tool for security. Review collected by and hosted on G2.com.

Secrets management and ease of use on cloud-native architectures. Review collected by and hosted on G2.com.

Initial setup and configuration on Kubernetes architecture can be complicated and time-consuming. Review collected by and hosted on G2.com.

* Protect passwords

* Confidential data

* Data box

* Run Review collected by and hosted on G2.com.

* Encrypt files

* Certificate

* Add password Review collected by and hosted on G2.com.

Rich set of options to control access (policies, groups), rich set of authorizations for users (e.g. oidc, leap) and for apps (kubernetes, approle). Versioned KV storage for secrets. Dynamic passwords for databases and etc. Review collected by and hosted on G2.com.

Open Source version does not have replication of any kind. Premium version has replication and disaster recovery, but replication sometimes has issues under big load. Even in Premium version, you can find bugs. Review collected by and hosted on G2.com.

It has both CLI and REST endpoints to manage secrets in one place. Along with secret management, it provides other features like audit for secret access. Review collected by and hosted on G2.com.

Documentation is not up to mark, some more improvement in documentation can lower the entry barrier for users. Review collected by and hosted on G2.com.

Personally and Professionally.. So, far i think the best thing i like about the Vault product is secure secret storage for API Keys and dynamic secrets. Also, the sheer fact that we can also utilize this as our CA aka Certificate Authority is huge and extremely awesome! Besides that, we're enabling Docker/Kubernetes access via Vault, and this is a huge breakthrough for us as an organization that is redefining a lot of things in our industry, especially in IoT. Review collected by and hosted on G2.com.

I don't really dislike anything. However, if i had to specify one specific thing, i would have to say large data encryption. But, due to my limited knowledge i can't truly say it's a dislike. It's just taken some work with my minimal knowledge to get applications setup properly to encrypt all their data types and then storing it in specific locations. Please do not take this "Dislike" the wrong way though. This product works great in many scenarios and i have no regrets thus far either way. It's not a dislike per say, just a learning curve for some of the typical use cases.. but is still coming along just fine for us overall. Review collected by and hosted on G2.com.

Secret as a Service (Dynamic secrets) and flexibility. Good integration with multiple authentication provider. Good varities on Dynamic secrets and can be used with Encryption as a Service. The installation and configuration is very easy. We can up and running a cluster in 1 day. The rolling update is easy and we can quickly add more cluster nodes if needed. Review collected by and hosted on G2.com.

Vault integration with project is leak. We have one side the Vault agent, and other side the Consul template or envconsul. For example, envconsul didn't work with Vault agent auto-auth token. It's hard sometime to use Vault because projects don't want (or haven't budget for) to develop Vault code lines integration. The Vault UI is very basic. Some actions can't be done with the UI. Add more UI features for administration facilities. Dynamic secrets is great but some time legacy application couldn't not use it. Should be great to have static secret with specific hook trigger to rotate password. Review collected by and hosted on G2.com.

Different method of authentication! Many engines with unique capabilities. Good integration with other Hashicorp products. Compatible with all the modern tools. Cloud friendly! It is easy to test features by just running the dev server on your local machine. Vault uses resources very efficiently so it does not require large servers. Review collected by and hosted on G2.com.

Implementing Vault properly in an organization is a bit challenging since the tool can do many things in many different ways and you should make sure you setup your workflows properly to be able to scale easily. Review collected by and hosted on G2.com.